Files
intrusion-detection/.gitignore
T
zwitschi 6036fa8b1e feat: Implement SQLite schema and migrations for intrusion detection system
- Added schema definition and migration logic in app/db/schema.py.
- Created tables for log sources, requests, IP stats, scans, blocklist, whitelist, and firewall rules.
- Introduced functions to apply migrations and ensure database integrity.

feat: Enhance scan functionality with database integration

- Added _sync_blocklist_to_db function to synchronize blocklist with SQLite.
- Updated run_scan function to handle database connections and scan records.
- Implemented error handling for database operations during scans.

feat: Introduce log analysis page and API endpoints

- Created analysis.html template for displaying log analysis results.
- Added routes for fetching top IPs, IP request timelines, and cross-source IPs.
- Integrated analysis data into the dashboard and status endpoints.

fix: Ensure whitelists are synchronized with the database

- Implemented sync_whitelists_to_db function to persist in-memory whitelists.
- Updated constants.py to define the path for the SQLite database.

refactor: Modularize analysis helpers for better maintainability

- Created _analysis_helpers function to encapsulate SQLite query logic.
- Updated routes.py to utilize new analysis helper functions for API responses.
2026-10-24 19:48:20 +02:00

30 lines
570 B
Plaintext

# instructions for agents
.github/instructions/
.agents
skills-lock.json
# environment variables
.env
# python cache
__pycache__/
.mypy_cache/
# python virtual environment
.venv/
# app runtime data (feeds, caches, scan state - regenerated each run)
# matched per-entry (not as a directory) so the whitelist seed files
# for Cloudflare and PaloAlto below can be re-included
app/data/*
!app/data/cloudflare/
!app/data/paloalto/
# SQLite database (canonical store) + WAL/SHM sidecars
app/data/*.db
app/data/*.db-wal
app/data/*.db-shm
# generated reports
app/reports/